JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

41.74.49.109

Recent Activity

Abuse Confidence Score

16% Caution

42 reports

24 reporters · latest 12 hours ago

ISP: Francistown Wimax128-protected
Usage Type: Mobile ISP
ASN: AS36963
Domain Name: orange.net.bw
Country: 🇧🇼 Botswana
City: Gaborone, Gaborone

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

42 from 24 distinct reporters

First reported

August 6th 2023

Most recent report

12 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 10 🇨🇭 Switzerland 1

Most common categories Bad Web Bot 10 Web App Attack 2 Brute-Force 2 Email Spam 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-11-13 21:35:27 UTC · (12 hours ago)	NOQUEUE - IP: 41.74.49.109 - Nov 13 22:35:27 plesk postfix/smtpd[1196223]: NOQUEUE: reject: RCPT from unknown[41.74.49.109]: 554 5.7.1 Service unavailable; Client host [41.74.49.109] blocked using b.barracudacentral.org; https://[site]/reputation/?p ... show more NOQUEUE - IP: 41.74.49.109 - Nov 13 22:35:27 plesk postfix/smtpd[1196223]: NOQUEUE: reject: RCPT from unknown[41.74.49.109]: 554 5.7.1 Service unavailable; Client host [41.74.49.109] blocked using b.barracudacentral.org; https://[site]/reputation/?pr=1&ip=41.74.49.109; from=<REDACTED@REDACTED> to=<[customer]> proto=ESMTP helo=<[41.74.49.109]> show less	Email Spam
🇺🇸 鬼影233	2026-10-03 06:27:43 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-10-02 09:37:42 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-10-01 16:12:06 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-10-01 08:33:46 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-30 06:04:42 UTC · (1 month ago)	(mod_security) mod_security (id:210350) triggered by 41.74.49.109 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 02:04:33.110228 2026] [security2:error] [pid 30576:tid 30576] [client 41.74.49.109:5525] ModS ... show more (mod_security) mod_security (id:210350) triggered by 41.74.49.109 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 02:04:33.110228 2026] [security2:error] [pid 30576:tid 30576] [client 41.74.49.109:5525] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|hollorancompanies.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hollorancompanies.com"] [uri "/"] [unique_id "arymcUTtjRdRwUHvfBG2-QAAAAk"], referer: https://linkbuildingconsultant.space/dir/backlinks-for-website-growth-93849 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-29 09:37:59 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 11:21:08 UTC · (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 06:34:26 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 21:45:15 UTC · (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-19 03:02:11 UTC · (1 month ago)	(mod_security) mod_security (id:210350) triggered by 41.74.49.109 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 23:02:06.872518 2026] [security2:error] [pid 30491:tid 30491] [client 41.74.49.109:10048] Mod ... show more (mod_security) mod_security (id:210350) triggered by 41.74.49.109 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 23:02:06.872518 2026] [security2:error] [pid 30491:tid 30491] [client 41.74.49.109:10048] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|somewierdness.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "somewierdness.com"] [uri "/"] [unique_id "aq37LtCZXb2ZlCCwNt4x9wAAAAU"], referer: https://backlinks-checker.com/share/30089 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-14 19:05:18 UTC · (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36	Bad Web Bot
🇮🇹 VHosting	2026-09-08 21:40:03 UTC · (2 months ago)	Detected mail brute force attack from different servers	Brute-Force
🇩🇪 MarkGGN	2026-09-08 19:07:20 UTC · (2 months ago)	SMTP Bruteforce. 2026-09-08T21:07:20.174636+02:00 . postfix/submission/smtpd[3334944]: warning: unknown[41.74.49.109]: SASL PLAIN authentication failed: authentication failure, * 2026-09-08T21:07:20.482783+02:00 . postfix/submission/smtpd[3334944 ... show more SMTP Bruteforce. 2026-09-08T21:07:20.174636+02:00 . postfix/submission/smtpd[3334944]: warning: unknown[41.74.49.109]: SASL PLAIN authentication failed: authentication failure, * 2026-09-08T21:07:20.482783+02:00 . postfix/submission/smtpd[3334944]: disconnect from unknown[41.74.49.109] ehlo=2 starttls=1 auth=0/1 commands=3/4 show less	Brute-Force
🇺🇸 kosada.com	2026-08-25 08:31:54 UTC · (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 2a06:4884:1000::a

🇸🇪 185.217.0.181

🇺🇸 172.236.228.208

🇫🇷 172.68.151.130

🇫🇷 172.68.151.113

🇫🇷 172.68.151.112

🇳🇱 109.160.32.120

🇵🇰 103.115.198.39

🇺🇸 91.230.168.241

🇪🇸 88.148.126.176

🇩🇪 85.155.14.245

🇺🇸 66.132.186.167

🇺🇸 65.49.1.136

🇸🇬 47.128.55.76

🇺🇸 40.119.42.102

🇧🇪 35.206.161.106

🇺🇸 34.185.99.12

🇧🇷 187.5.20.33

🇫🇷 169.40.142.247

🇭🇰 152.32.169.155